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ABSTRACT OF THE DISCLOSURE 

Disclosed is a method aad apparatus in which one or more data streams are sent to 
a computer and the data streams are sorted using a rule base into streams representative 
of events. The incoming data streams can be sent by hunter agents which search for 
specified types of data and forward the data to the computer. The incoming data stream 
can also be sent by a gatherer agent. The incoming data stream can also be incoming 
message traffic such as e-mail and other types of mess£^e traffic data. The incoming 
message traffic data is then sorted into event streams and can be displayed as event 
streams on a time line. Actions can be taken based upon specified events. Thus, events 
from disjointed sources can be sorted and displayed in a unified manner in which a user 
can readily and quickly know which events have occurred for a particular issue, such as a 
forest fire, hospital patient, etc. 


